Curated educational guides written by our team to help you recognise the most common UK scams — before you become a victim.
Fraudsters call posing as NatWest fraud staff and convince victims to transfer their entire savings to a 'safe account'. The money is immediately stolen.
Fraudsters impersonate Lloyds Bank fraud staff and convince victims to urgently move their savings to a 'safe account'. All transferred funds are stolen immediately.
Fraudsters call posing as Barclays security staff and trick victims into reading back an OTP code that gives them full access to the victim's account.
A fraudster calls posing as TSB security staff and requests a one-time password to 'verify' a payment, immediately using it to steal money from the victim's account.
Scammers use automated robocalls impersonating HMRC and threatening arrest over unpaid taxes. The call is designed to panic victims into calling back and making payments.
Criminals call posing as Microsoft support staff and convince victims to install remote access software, giving them control of the computer to steal banking details and commit fraud.
Scammers send WhatsApp messages pretending to be a family member in crisis asking for an urgent bank transfer. This is one of the most successful scams targeting UK adults.
Social media posts recruit unwitting victims as money mules by offering easy cash to receive and forward payments. Participants unknowingly commit money laundering and face criminal prosecution.
Criminals impersonate HMRC offering a tax refund to trick you into handing over bank details. HMRC never contacts taxpayers about refunds this way.
Scammers use an automated voice message claiming HMRC has suspended your National Insurance number, threatening benefit loss to trigger a callback to a fraudulent number.
A scammer posing as a friend asks you to forward a WhatsApp verification code that was 'accidentally' sent to you. Sharing it gives them complete access to your account.
Criminals call posing as Santander fraud prevention staff and extract personal details that are then used to take over accounts or steal identity.
A fake SMS impersonating Barclays claims your card has been blocked due to fraud and asks you to verify your identity via a phishing link.
Scam SMS impersonating Santander references a large outgoing payment to provoke panic and direct victims to a credential-stealing phishing page disguised as a cancellation screen.
Scammers send fake HSBC payment authorisation texts with large sums to panic victims into clicking a fraudulent link that harvests banking credentials.
Scammers send fake Apple emails threatening permanent account deactivation to steal your Apple ID credentials via a convincing fake sign-in page.
A fake NatWest fraud alert text references a large payment to trigger panic and direct victims to a credential-stealing phishing page.
Scammers impersonate PayPal claiming an accidental large refund was paid to you. When you call to return it, they steal your bank details to drain your real account.
A phishing email falsely claims your Amazon account is suspended and directs you to a fake sign-in page to harvest credentials and card details.
A fake Microsoft security alert appears in your browser claiming your PC is infected. Calling the number connects you to fraudsters who charge for fake support or install real malware.
Scammers send fake Lloyds Bank security alerts via SMS, directing customers to a phishing site to steal internet banking credentials.
Scammers impersonate PayPal claiming your account is limited. The link takes you to a realistic fake login page that steals your credentials and financial information.
HMRC never contacts taxpayers via SMS about refunds. This is a well-known phishing scam designed to steal your bank details. The domain is not an official UK government (.gov.uk) domain.
Fake Lloyds Bank SMS claims your card has been blocked due to a fraud attempt and directs you to a phishing page to steal your banking credentials and card details.
Fake Santander SMS claims unusual activity on your account and threatens suspension, directing you to a phishing site to steal your banking login.
A fake SMS impersonating Royal Mail asking for a small redelivery fee to release a parcel. The link leads to a phishing site that steals card details.
Phishing email impersonates NatWest and threatens account closure due to inactivity, directing victims to a fake reactivation page to steal banking credentials.
A fake Amazon Prime renewal charge email panics recipients into clicking a fraudulent link, where scammers harvest card details or gain remote access to devices.
Fake Royal Mail SMS claims your parcel is stuck at customs and requests a small release fee via a phishing link that steals card information.
Phishing email targets Amazon sellers with a fake account suspension notice and threat to withhold funds, directing them to a credential-stealing fake Seller Central page.
A fake PayPal security email claims an unauthorised sign-in, directing you to a phishing page designed to steal your PayPal login credentials.
Fraudsters impersonate Evri via SMS, claiming a parcel is held due to a customs fee. The link leads to a card-harvesting phishing page.
Fraudsters send fake TSB fraud alerts referencing a large transaction, directing victims to a phishing site under the guise of rejecting the payment.
Phishing email impersonating HSBC claims your account is locked and redirects you to a fake login page to steal your banking username and password.
Fraudsters impersonate the DVLA via SMS, claiming your driving licence needs renewing and directing you to a fake site that steals your payment details.
A phishing email impersonating DHL requests a small customs payment via a fake link. The site harvests card and personal details.
A phishing email impersonates Netflix claiming a failed payment will suspend your account. The link leads to a fake billing page designed to steal card details.
Scammers impersonate Starling Bank via SMS claiming your account is restricted and directing you to a fake identity verification site to steal your credentials.
Amazon will never ask you to verify your account through a link in an unsolicited email. The domain is not amazon.com. This is a phishing attack to steal your login credentials and payment details.
Phishing email impersonating HMRC claims errors on your Self Assessment return, threatening a real-looking penalty to redirect you to a credential-stealing fake portal.
Scammers impersonate the DVLA via SMS, offering a false overpayment refund to trick victims into submitting bank details on a phishing site.
Scammers send fake Amazon order confirmations for high-value items to panic victims into calling a fraudulent number, leading to payment or remote access fraud.
Fake DVLA SMS threatens an £80 fine for not renewing vehicle tax, directing victims to a phishing site that steals payment card details.
Fake SMS impersonating Apple claims your Apple Pay wallet has been suspended and directs you to a phishing site to steal Apple ID credentials.
Phishing email impersonating Starling Bank claims account features are limited and directs customers to a fake identity verification page to steal personal and banking data.
Fraudsters send fake DPD missed delivery texts requesting a small fee via a phishing link to steal payment card details.
Phishing email targeting UK employers impersonates HMRC PAYE communications, threatening penalties and directing to a fake employer portal to steal business credentials.
Fake DHL SMS requests a small rescheduling fee for an undelivered parcel via a link that harvests card payment information.
Phishing email impersonates a Microsoft OneDrive file share and requires login credentials via a fake page, harvesting Microsoft account usernames and passwords.
Phishing email impersonates Barclays and uses a fake platform upgrade story to collect customer banking credentials on a convincing fake verification page.
Fraudulent DPD email claims customs clearance fees are due on an incoming parcel, directing victims to a phishing site to steal card details.
Scammers pose as HMRC and target small business owners applying for VAT registration, directing them to phishing sites that steal business and personal information.
Scammers send fake Royal Mail Click & Collect texts adding a fabricated storage fee, directing victims to a phishing site to steal card details.
This is a classic Royal Mail impersonation scam. The real Royal Mail never requests payment via SMS link. The URL uses a '1' instead of 'l' in 'mail' — a common trick to deceive victims.
A phishing email impersonating Netflix warns of a password reset and tricks victims into clicking a 'cancel' link that actually leads to a credential-harvesting page.
Phishing email impersonating Microsoft claims your 365 subscription is expiring, directing you to a fake renewal site to steal card details.
Fraudulent Evri email claims a failed delivery attempt and charges a small redelivery fee via a phishing site that steals card details.
Scammers target car owners via SMS claiming their personalised number plate reservation is expiring, directing them to a fake DVLA site to steal payment card details.
Phishing email exploits Netflix's real account sharing policy changes to trick customers into visiting a fake site where card details are stolen.
Fake Evri SMS claims your delivery address is incorrect and asks you to update it via a phishing link designed to harvest personal and payment data.
Fake Amazon SMS claims a failed delivery and asks victims to update their address via a phishing site that steals personal and payment data.
Fake Apple email warns that iCloud storage is full and photos may be lost, directing you to a phishing site to steal card details under the guise of an upgrade.
Banks use official app notifications or call you from verified numbers — never SMS links. The domain is not barclays.co.uk. If you suspect real fraud, call the number on the back of your card.
A viral WhatsApp message promotes a fake 'WhatsApp Gold' premium upgrade. The link either installs malware on your device or harvests personal data.
This is an account takeover scam. The attacker has already compromised your contact's account and is now using it to steal yours. Sharing the code gives them full access to your WhatsApp.
This is a 'vishing' (voice phishing) scam. Calling the number connects you to fake PayPal agents who will try to steal your account credentials or bank details under the guise of 'cancelling' the transaction.
